Re: [cobalt-users] hack?

["Steve Werby" <steve-lists@xxxxxxxxxxxx>]

"John D. Gorena" <Support@xxxxxxxxxxxxxxxxxxx> wrote:
> How much tighter can I get it?  I do not allow telnet and we
> use SSH.  Is there something that I am missing?

Security is much more than disabling telnet.  Local and remote users can
gain root access through holes in standard software with known
vulnerabilities, brute force attacks, etc.  Enforcing strong passwords,
disallowing shell access to users who don't need it, turning off services
you don't need, patching vulnerable software, limiting access to certain
ports to specific machines, setting up a firewall, checking for rootkits,
analyzing log files for suspicious activity and checking for unusual files
and permissions are just some of the things that can be done to improve
security.  This topic has been covered endlessly and a few hours reading
through the archives or googling for security will help you see the light.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/